Testing quantum expanders is co-QMA-complete 



Adam Bookatz* Stephen Jordan* Yi-Kai Liu* Pawel Wocjan^ 

October 2, 2012 



Abstract 

A quantum expander is a unital quantum channel that is rapidly mixing, has only a 
few Kraus operators, and can be implemented efficiently on a quantum computer. We 
consider the problem of estimating the mixing time (i.e., the spectral gap) of a quantum 
expander. We show that this problem is co-QMA-complete. This has applications to 
testing randomized constructions of quantum expanders, and studying thermalization 
of open quantum systems. 

1 Introduction 

A quantum expander is a unital quantum channel that is rapidly mixing. This means 
that, with repeated applications of the channel, every quantum state is rapidly con- 
tracted to the maximally mixed state, which is the unique fixed point. In addition, a 
quantum expander has only a small number of Kraus operators, each of which is de- 
scribed by an efficient quantum circuit. Quantum expanders are quantum analogues of 
expander graphs, which play a prominent role in computer science and discrete math- 
ematics |15j . The idea of quantum expanders was introduced in |12} 14]. Since then, 
several explicit constructions of quantum expanders have been discovered, and quan- 
tum expanders have found various applications in quantum information theory, such 
as constructing quantum states with unusual entanglement properties, and simulating 
thermalization in quantum systems [5j [13J [TUl El [111 E] . 

Here we study the problem of estimating the mixing rate of a quantum expander. 
Given a quantum channel of the above form (a small number of Kraus operators, 
specified by quantum circuits), this problem is to estimate the spectral gap of <3?. This 
problem arises in connection with randomized constructions of quantum expanders [7] , 
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where with high probability one obtains a good expander, but it is not obvious how 
to test that a particular instance of the construction is in fact good. In addition, this 
problem can be viewed as a special case of a more general question: given an open 
quantum system, determine whether it thermalizes, and on what time scale. (The 
behavior of a quantum expander is roughly equivalent to that of a quantum system 
with a particular weak coupling to a bath of harmonic oscillators.) 

Formally, we define the "quantum non-expander problem" (which is the comple- 
ment of the above problem), and we give evidence that this problem is computationally 
intractable: we prove that it is QMA-complete. Here QMA (Quantum Merlin- Arthur) 
is a complexity class that is a quantum analogue of NP (Nondeterministic Polyno- 
mial Time) [19|. [23j [26] . Proving that a problem is QMA-complete implies that it is 
equivalent (up to polynomial-time reductions) to all other QMA-complete problems 
[221 [TH [201 [211 [HI [H [T7]. In particular, this implies that the problem cannot be 
solved in polynomial time (unless QMA = BQP). Furthermore, this implies that our 
original problem, the "quantum expander problem," cannot be in QMA (unless QMA 
= coQMA). In other words, when a channel <J> is not a quantum expander, there is an 
efficiently-verifiable quantum proof of that fact; but when $ is a quantum expander, 
there is no way of giving an efficiently-verifiable quantum proof. 



2 Preliminaries 

2.1 The quantum non-expander problem 

We use the definition of explicit quantum expanders due to Ben-Aroya, Schwartz, and 
Ta-Shma |5j. For an iV-dimensional Hilbert space H, let L(T~L) denote the space of 
linear operators from H to itself. A superoperator <I> : L(H) — > L(H) is admissible if 
it is a completely positive and trace-preserving map. An admissible superoperator is 
unital if <£(/) = /, where I = jt is the maximally mixed state on H (where / is the 
identity operator on T~L). A unital superoperator is L>-regular if <!> = j)^ d &d> and 
for d = 1,...,D, ^(A) = UdXUj where the Ud are unitary transformations on H. 
The unitaries Ud are called the operation elements (or Kraus operators) of <£, and D 
is called the degree of A D-regular superoperator is explicit if each of its operation 
elements can be implemented by a quantum circuit of size polylog(A), where N is the 
dimension of %. 

Definition 2.1 (Quantum expander). A D-regular superoperator <3? : L(%) -4 L(H) 
is a n- contractive expander if for all A € L(H) that are orthogonal to I with respect to 
the Hilbert- Schmidt inner product, that is, Tr(AT) = 0, it holds that 

\MA)\\ F <k\\A\\ f . (1) 

Here the Frobenius norm is given by \\A\\p = l a ul 2 ? where are the entries of 

the matrix A. The quantity 1 — k is called the spectral gap of 

Remark 2.2. The motivation for this definition can easily be seen from the following 
argument. A good quantum expander $ rapidly sends any density matrix p to the 
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maximally mixed state I. Because Tr[p] = Tr / = 1 we can always write p = I + A 

where TV [A] = 0. The requirement of Eq. (fTJ) therefore formalizes the idea of bringing 
p towards / by rapidly killing off the A term. In this context Eq. dU) is equivalent to 



demanding that 



*(p) " I 



< K 



P 



I 



which clearly encapsulates the idea of 



rapidly sending density matrices towards the maximally mixed state. Note that in this 
argument A = p — I is Hermitian; however, it can be shown that if Eq. ([TJ) applies 
for traceless Hermitian matrices, it also applies for traceless matrices in general, thus 
justifying Definition 12.11 

We consider the problem of estimating the mixing time of a quantum expander. 
Formally, we study the following decision problem: 

Definition 2.3 (Quantum non-expander problem). Fix some encoding such that each 
string x G {0, 1}* specifies the following: an explicit D-regular superoperator : 
(C 2 )® m —7- (C 2 )® m , with operation elements U%,..., Ud, and two parameters a > (3. 

We will consider instances which satisfy the following promise^: m and D are 
upper-bounded by (fixed) polynomials in \x\; the parameters a and j3 are polynomially 
separated, i.e., they satisfy a — (5 > q (\ x \\ f or some (fixed) polynomial q; and the opera- 
tion elements 17%,..., Ud are given as quantum circuits of size at most r(\x\) for some 
(fixed) polynomial r. 

The "quantum non-expander" problem is the task of deciding which of the following 
is correct, given the promise that exactly one of them is correct: 

• $ is not an a-contractive expander (YES case) 

• & is a (3 -contractive expander (NO case) 



2.2 Thermalization of open quantum systems 

To motivate the "quantum non-expander" problem, we now describe a connection be- 
tween that problem and the study of thermalization in open quantum systems. We 
show an example of a quantum system coupled to a bath, where the system thermal- 
izes, and the relaxation time is determined by the spectral gap of a certain quantum 
expander. 

Let the system consist of m qubits, and fix some unitary transformations U a (for 
a = 1, . . . , D) which act on (C 2 )® m . Let the bath consist of a large number of harmonic 
oscillators, with annihilation operators b a k (for a = 1,. . . ,D and k £ Q, where f2 is 
some large set). Let the total Hamiltonian be 

H = H s + eHj + H Bl (2) 

where the system Hamiltonian is H$ = 0, the bath Hamiltonian is 

H B = ^kb^bak, (3) 

a k 

Here \x\ denotes the length of the string x. 
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and the interaction Hamiltonian is 



Hi = J2( u * ® /«) + (Ut ® /t), (4) 

a 

where the operators / Q are defined by / a = l— Y^k bak- 

In the weak-coupling limit (e — >• 0), the time evolution of the system is described by 
a master equation [8j. Suppose the bath is in a thermal state, ps = (1/Zb) exp(— Hb/T). 
Then the master equation takes the following form: 

j t p s {t) = R ^2 (UaPs(t)Ul - Ps (t)) + Rx ^2(u aPs (t)Ua ~ Ps(tj) , (5) 

a a 

where ps(t) is the state of the system at time t, and Rq and Ri are positive real numbers. 
Equation ([5]) has two special features: there is no contribution from a "Lamb shift" 
Hamiltonian, and the dissipator is in diagonal form with Lindblad operators which are 
unitary. (See App endix I A . 1 1 for the derivation of this equation.) 
Now define the quantum channel 

§(o) = — ^° y u aP ut + - — Rl - y uipu a . 

yH! {Rq + R^D^ al ° (R + Ri)D ^ aH 

This channel $ is a (non-uniform) mixture of unitary operations. In the special case 
where the set of unitaries {U a | a = 1, ... , D} is closed with respect to the adjoint 
operation (i.e., for every 1 < a < D, there exists some 1 < j3 < D such that U a = Ul), 
the channel $ can be written as 

a 

hence $ is a L>-regular superoperator, as described in the definition of a quantum 
expander. 

The master equation can now be rewritten in terms of <£: 

j t ps(t) = (R + R X )D ■ (* - l)(ps(t)), 

where X denotes the identity channel. We can solve for ps(t): 

Ps (t) = exp(t • (Rq + R X )D ■ (* - X)) (p s (0)). 

Thus the system converges to the maximally mixed state as t — > oo, and the rate of 
convergence depends on the spectral gap of <3?. More precisely, write ps(t) = I + A(t) 
where A(t) is traceless. Then it can be verified that 

\\A(t)\\ F < exp ( - t ■ (R + Ri)D(l - k)) \\A(0)\\ f . 
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2.3 Quantum Merlin- Arthur 

We will show that the quantum non-expander problem is QMA-complete, i.e., it is 
contained in QMA, and every problem in QMA can be reduced to it in polynomial 
time. 

The complexity class QMA consists of decision problems such that YES instances 
have concise quantum proofs. The name QMA stands for Quantum Merlin-Arthur, 
which is motivated by the following protocol. Given a problem instance x {i.e. a string 
of \x\ bits), and a language L G QMA, a computationally unbounded but untrustwor- 
thy prover, Merlin, submits a quantum state of poly(|x|) qubits as a purported proof 
that x G L. A verifier, Arthur, who can perform polynomial size quantum computa- 
tions, then processes this proof and either accepts or rejects it. If x G L then there 
exists some polynomial size quantum state causing Arthur to accept with high proba- 
bility, but if x ^ L then Arthur will reject all states with high probability. QMA is a 
quantum analogue of MA, which is the probabilistic analogue of NP. 

Definition 2.4 (QMA(a, 6)). A language L is in QMA(a,b) if for each x G {0,1}* 
one can efficiently generate a quantum circuit V with the following properties: 

• V acts on the Hilbert space W ® A where 

W = (C 2 ) 0n ™, A = (C 2 )® na , 

and the functions n w , n a : IN — > N grow at most polynomially in \x\ 

• V consists of s(\x\) elementary gates where the function s : N — > IN grows at most 
polynomially in \x\ 

• if x G L (YES case) then there exists a witness state \ip) G W such that 

||Py|V>|0)|| 2 >a (6) 

• if x £ L (NO case) then for all states G W we have that 

\\PVm\0)\\ 2 < b (7) 

Here W and A are the witness and ancilla registers, respectively, and P = |1)(1| <S> 1 
projects onto the subspace of the first qubit of W <8> A being in the state \ 1) . The state 
|0) = 1 00 . . . 0) is the all-zeros state on A. 

Observe that V,W,A, 

n a: n w and P depend on x; however, to avoid unnecessarily 
complicated notation, we do not indicate this explicitly. 

Remark 2.5. It is conventional to define QMA = QMA(2/3, 1/3). However, the 
complexity class QMA(a, b) is highly insensitive to the particular values of a and b. 
In fact, even if a and b are functions of the problem size n, it remains true that 
QMA(o(n),6(n)) = QMA provided a(n) - b(n) > for some polynomial p. It is 
always possible to achieve that a = 1 — e and b = e by increasing the size of the circuit 
by a factor polylog(l/e) and increasing n a by polylog(l/e) qubits, with no change in 
n w [MIES]. 
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3 Quantum non-expander is in QMA 



We now show that the problem defined in Definition 12.31 is in QMA. We first consider 
the YES case. In this case, Merlin has to convince Arthur that there exists a traceless 
matrix A such that 

||*(A)||j? > a\\A\\ F . (8) 

We may assume w.l.o.g. that \\A\\p = 1. Clearly, Merlin cannot directly send the 
matrix A because it is an exponentially large matrix. Instead, he can send the quantum 
certificate 

N 

\iPa) = a>ij\i) ® \j) 

encoding the matrix A. We show that \iPa) can serve as a witness making it possible 
to convince Arthur that the inequality in Eq. ([8]) holds. 

Arthur's verification protocol makes use of the following facts: 

||A||| = (VuIVm), 

Tr[A] = (ip A \<p), 

where \<p) = ^= ^iLl \i) <g> and 

\\*{A)\\ 2 F = (4> A \WiW\il>A), 

where 

1 D 

w = -Y J u d ®u d 

d=l 

and U d denotes the complex conjugate of U d . 

First, to check whether Tr[A] = 0, Arthur verifies that \ipA) is orthogonal to \ip). 
Second, to estimate the contractive factor, Arthur estimates the expectation value 
(iPaIW^WIi/ja) of W^W. For d,e = 1,...,D, define the unitaries 

v d>e = {pl®uj){p e ®u e ). 

Note that V die = V} d and V d)d = 1. The expectation value can be expressed as 

d,e d<e 

Arthur can estimate the values Re^Al^elV'yl) using the Hadamard test [shown in 
Fig. {!])] since it will output 1 with probability Pr(l) = ^(1 + Ke(^A\V die \ipA}) ■ From 
this Arthur can calculate (ip A \W 'W\tp A ) = ll^(A)|||i and ensure it exceeds a 2 . 

Now consider the NO case. In this case, Arthur's first measurement projects the 
state \iJja) onto the subspace orthogonal to \<p); and by definition, all states \iPa) in 
that subspace must satisfy 

(iPMW^W^a) = \MA)\\ 2 F ^(3 2 . 
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d,e 



Figure 1: Hadamard test for V d . 



This shows that Merlin cannot cheat, that is make Arthur believe that there exists a 
quantum state with contraction greater or equal to a, provided that Arthur estimates 
the expected value sufficiently well and with sufficiently high probability of confidence. 

As in Kitaev's original proof, we may assume that Arthur has multiple copies of 
the quantum certificate \tp) so that we can estimate the expected value sufficiently 
well. Using the powerful technique of in-place amplification [24J, we can transform a 
quantum circuit requiring \tp)® k into one that requires only a single copy of 



4 Some technical tools 
4.1 The Frobenius norm 

In the proof that quantum non-expander is QMA-hard we will frequently make use of 
the Frobenius norm; we therefore present some useful facts about this norm here. If B 
is a matrix with entries 6«, then the Frobenius norm is defined as 



\B\ 



Tr[BiB]= IJ2 



b-\ 2 



(9) 



We have the following identities: \\A® B\ 



\A\\ F \\B\\ F , Tr[A®B] = Tr[A]Tr[B], 



and of course Ti[A + B] = Tr[A] + Tr[2?]. If \ip) and \4>) are pure states then 



MM 



(10) 



Note that || 1 0> <0| \\ F = \\ |1)(1| \\ F = 1. 

In this paper we denote the Pauli matrices on one qubit by Uj, with a$ = 1, 
and CT3 = a z . Consider any traceless matrix A that acts on some 



0"! 



space C ® C , where we will refer to the second subspace (i.e. single-qubit subspace) 
as the indicator qubit register. Because the Pauli matrices Oi form a basis for the 
matrices acting on the indicator qubit register, we can decompose A as ^i=o^* ® a ii 
where A{ are matrices on the combined multiqubit subspace (the witness and ancillae 
registers that we will see later). Because o~i are traceless for i = 1,2,3, the traceless 
condition on A therefore becomes Tr[^4o] = 0. Moreover, because the Pauli matrices 
are orthogonal with respect to the trace inner product and all satisfy = 2, we 

have Ai ® Oi\\ F = Y^i \\A <8> <7i\\% = 2£V \\Ai\\ 2 F , giving the inequality 



i=0 



> \f2\\A 



fill 
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A quantum operation G is called a pinching operator if G(B) = Yp PBP where 
P are non-overlapping projectors with Yip P = 1- Pinching operators are trace pre- 
serving, 



Tr 



Y^pbp 



Tr[B] , 



(12) 



and moreover, (by the pinching inequality) cannot increase Frobenius norm: 



£ PBP 



< 1151 



(13) 



It should be noted that a quantum expander £ is also norm-non-increasing, 

\\£(B)\\ F ^\\B\\ F , (14) 

and similarly for any projector P, 



\PBP\\ F < ||B|| F . 



(15) 



4.2 Controlled expanders 

The remainder of our paper will make repeated use of controlled expanders, which we 
introduce here. If U is a unitary gate, we use the notation AU to indicate a controlled-?/ 
operation. 

Definition 4.1 (Controlled expander). Let J 7 be a quantum expander with operation 
elements {U{ : % = 1 . . . m} so that J-(B) = — YhLi UiBllj . The controlled expander 
AF is defined to be the m-regular superoperator whose operation elements are the con- 
trolled unitaries {AUi : i = 1 . . . m}. 

More explicitly, consider two registers, a control register and a target register, and 
suppose that an expander F acts on the target register as F{B) = ^ YaLi UiBllj . 
Decompose the control register into two orthogonal subspaces, and let Q and P be 
projectors onto these two subspaces (so Q + P = 1 and PQ = QP = 0). Suppose 
that the controlled operations AUi are to be applied when the control register is in 
the subspace corresponding to P; thus AUi = P <8> Ui + Q <8> 1. Consider a matrix 
A <g) B, where A and B act on the control and target registers, respectively. Then the 



8 



controlled expander AJ-, with operation elements APj , acts on A ® P as 



1 m 

AT(A®B) = -J2[( A Ui)(A®B)(AU} 

8=1 

— V f(P <8 C/i + Q (8) t)(A <8 P)(P (8) P| + Q ® 1) 



m 

i=l 



-t m 

m — ' L 

i=l 



PAP ® UiBUj + PAQ ® P;P + QAP ® PP/ + QAQ ® P 



= PAP®-V(P 4 PP/) + PAQ® ( -V P; ) P (16) 

+ QAP ® B (j-Y^u}^ + QAQ ® P. 

Note that if we impose on T the requirement that 

X> = 

j 

then we obtain 

AP (A®B) = PAP ® P(P) + QAQ (8 P (18) 

which is how we would naturally desire a controlled expander to act. Unfortunately, 
unlike Eq. (|18p . Eq. (|16p has additional crossterms whose elimination would greatly 
simplify our future analysis. 

We will, however, freely assume that Eq. (117p is satisfied, justified by the following 
observation. If necessary, we may always increase the set of operation elements of P 
from {Ui : i = 1 . . . m} to {Ui : i = 1 . . . m} U {—Ui : i = 1 . . . m}. Such a change has 
no effect on the original expander P; the expander P(P) = -jr XX Pi ^ ) ^ s invariant 
under P, o — Pj, even though the controlled expander AP(P) = ~ ^(APj P AP?) is 
not necessarily invariant under Pj o — Pj. Thus, with only a factor of two overhead in 
the number of unitiaries, we may satisfy the condition of Eq. (|17p . thereby eliminating 
the undesired crossterms; as such, Eq. (I18p may effectively be taken as the definition 
of a controlled expander. 

A concrete example of a controlled expander - and one of particular importance 
in this paper - is the controlled complete depolarizer. Throughout this paper we use 
P to denote the complete depolarizing channel on a single qubit, which is normally 
defined to apply a unitary from {1, X,Y, Z} with uniform probability 1/4. To ensure 
that Eq. (|17p is satisfied, we therefore define the effect of P on a matrix a to be 

V{a) = -YWaW = t^ 
w 8 ^ 2 

w 

where the sum is over W £ {1, X, Y, Z, — 1, — X, — Y, — Z}. Consequently, the con- 
trolled complete depolarizer AP with a single qubit target and (possibly multiqubit) 
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control — / -J- 

target —f [j^ 

Figure 2: A controlled expander, A J 7 

control projectors P (indicating apply T>) and Q (indicating do nothing) is the 8-regular 
superoperator with operation elements 

{A(l),A(X),A(y),A(Z),A(-l),A(-X),A(-y),A(-Z)} 

having the effect 

AV{A®a) = PAP®t^]^ + QAQ®(j. (19) 

Although controlled expanders are not actually quantum gates, we will nevertheless 
include them in circuit diagrams. If AP'(B) = -jr ^(A£/j B Allj) then the circuit in 
Fig. [2] is to be interpreted as applying an element selected uniformly at random from 
the set {AUi} (or equivalently, as applying to the target register a unitary selected 
uniformly at random from the set {£/,}, but only if the control register is in the appro- 
priate state.). As a final remark note that although a controlled expander is a unital 
map, it is not itself a good expander (firstly, because depending on the control qubit, 
the operator might not do anything at all, and secondly because even when the opera- 
tor does act, it only expands on the subspace of the target, not the entire space). For 
example, note that |0)(0| <S> |0)(0| is not contracted at all by the controlled complete 
depolarizer AD, thus indicating that AD is not a good expander. 



5 Quantum non-expander is QMA-hard 
5.1 Outline of the proof 

Let L be any language in QMA(|, g). We show that the quantum non-expander 
problem is QMA-hard by reducing L to a quantum non-expander problem. Specifically, 
let x be an |x|-bit problem instance whose inclusion in L, or lack-thereof, we wish to 
determine. Because L £ QMA we have access to a verifier circuit satisfying Eqs. (|6|) 
and (|T|) acting on a witness space of n w = poly(|x|) qubits and some ancilla space. For 
reasons that will become apparent later, we now use QMA amplification to give that 
L G QMA(a, b) for polynomially separated a and b where 

a > 0.99 and b < (0.1)2" (n ™ +1) . 

Note from Remark 12.51 that this can be done without increasing the size of the witness 
space of the verifier. Let the resulting QMA(a, b) verifier circuit be called V, which 
acts on the same witness space of n w = poly(|x|) qubits and some ancilla space of 
n a = poly(|x|) ancilla qubits. Merlin can provide Arthur a valid (with high probability) 
witness if and only if x G L. 

Let £ be an explicit ^-contracting expander of degree Dg acting on n w + n a qubits, 
where Kg < 0.1 and Dg is constant (independent of \x\). Such expanders are known 
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n„ 



n„ 



witness — j- 
n a 

ancilla — j- 



V 



-f ~~ 

V* n a £ 



indicator- 



V 



ancilla 
verifier 



witness 
verifier 



controlled £ 



Figure 3: The map $ constructed from the verifier circuit V, the complete depolarizer V, 
and the /^-contractive expander £. The first controlled depolarizer is applied only if the 
ancillae are not all zero and the second one only if the top output is zero. The controlled 
^-expander is applied only if the bottom qubit is one. Note that this figure is not a true 
circuit because V and £ are quantum expanders, not unitary gates. 



to exist, as we outline in Appendix IA.2I using Ref [6]. Using V and £, we create a 
quantum expander $ that is bad if x G L but good if x ^ L; indeed, we will present 
polynomially-separated (in fact, constant) a and ft such that $ is a /3-contracting 
expander if x £ L but is not an a-contracting expander if x G L. The circuit for $ is 
shown in Fig. [3l which we now describe in detail. 

The map <]? acts on three registers, which from top to bottom are the witness register 
(ofn w qubits), the ancilla register (of n a qubits), and an additional single-qubit register 
we call the indicator qubit register. The circuit is realized by composing the following 
three maps: 

1. the ancilla verifier 

2. the witness verifier 

3. the controlled £. 

The basic idea is that if x G L then Merlin can provide a valid witness and properly 
initialized ancillae that will pass the verifiers and not be mixed by the final controlled 
expander (indicating that our quantum expander is bad); conversely, if x ^ L then 
no matter what witness and ancilla qubits Merlin provides, the indicator qubit will 
be depolarized and consequently his state will be well-mixed by the final controlled 
expander (indicating our expander to be good). 

We now provide a detailed description of the three different maps and their pur- 
poses. 

1. The ancilla verifier is the first gate in Fig. [3j It is the controlled expander A anc T), 
which applies the complete depolarizer T> to the indicator qubit register only if 
any of the ancilla bits are 1 (i.e. if they are not all 0). More technically, it is 

A anc V(B) = 1 A <™cW B A anc W^ 
w 

(with W G {l,X,Y,Z,-l,-X,-Y,-Z}), where A anc W is the gate shown in 
Fig. HI Note that A anc W requires a controlled-TF^ gate controlled by n a qubits, 
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witness 



ancillae < 



indicator 



W 



X 



X 



X 



X 



X 



X 



Figure 4: The controlled expander verifying the ancillae. The unitary W is selected from 
{l, X, Y, Z, — 1, —X, —Y, —Z} uniformly at random. 



which can be implemented with n a 2 gates using no extra work qubits (It is 
important that the implementation not require work qubits, because we demand 
that there are no internal ancillae; our expander must be an expander on the entire 
space, not just a subspace.) Intuitively, if the ancilla qubits are not initialized to 
be all O's, the verifier will depolarize the indicator qubit, whence the term ancilla 
verifier. 

2. The witness verifier consists of the next three gates in Fig. [3l First, V operates 
on the witness and ancilla registers, with its output on the top qubit (with |1) 
signifying that the witness is valid, |0) signifying that it is invalid); the lower 
multiqubit register on n w + n a — 1 qubits contain the rest of Vs output (required 
by reversibility). A controlled-depolarizer then acts on the indicator qubit, con- 
ditioned upon the top qubit being |0) (i.e. failing the witness verification). The 
effects of V are then uncomputed with V*. At this point, intuitively, the indicator 
qubit has been depolarized if and only if the input failed either the ancilla verifier 
or the witness verifier (or both). 

3. Finally, the last gate, which is the controlled expander Aj n( j£ , acts, conditioned 
on whether the indicator qubit is |1). Intuitively, if the input was \ip) ® |0) ® |0), 
with the indicator qubit initialized to |0), with the ancilla qubits initialized to 
|0) = 1 00 . . . 0), and with a valid witness (for x € L), then the indicator qubit 
will remain |0) and nothing will happen; if, on the other hand, the witness/ancillae 
failed any of the verifiers, thus depolarizing the indicator qubit to be \ 1 = 
2 |0)(0| + \ then £ will act on the top registers, resulting in a highly mixed 
output (across all three registers). 

Note that because £ is an explicit Z?£-regular expander (where Dp is a constant), 
being the composition of two explicit 8-regular superoperators and A£, is manifestly 
explicit and 64D,f -regular (i.e. of constant degree). We now proceed to show that $ is 
indeed a good expander if x ^ L (the NO case) but not if x £ L (the YES case) . 
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5.2 Analysis of NO case 

First, consider the case in which x ^ L. We wish to show that is a good expander, 
and therefore by Eq. (pQ), that it sufficiently decreases the Frobenius norm of any input 
traceless matrix. As discussed earlier, we may therefore take the input state to be 
Ya=o ® °i f° r some matrices A4 with Tr[Ao] = 0, where <7j are the Pauli matrices on 
the indicator qubit register. 

Both the witness and ancilla verifiers are controlled depolarizers, and we can analyse 
each of them in the same way using projection operators that act on some subspace of 
the system; specifically, we will use Q = passes \ 4>){4>\ that projects onto the states 
that pass the verifier and P = J2<p fails l^ifil that projects onto the states that fail it. 
For the ancilla verifier, these are Q a = |00 . . . 0)(00 . . . 0| anc (more properly written as 
Qa = Iwit ® |00 . . . 0) (00 . . . 0| onc ® t md ) and P a = 1 - Q a = Ex^OO...O \ X ) ( X \anc- For the 
witness verifier, Q w = V* \l)(l\ top V and P w = V* |0)(0| top V (so that P w + Q w = 1). 
Here the subscript top is used to indicate the top qubit register output from V. 

Applying Eq. (|19p and linearity, the effect of a verifier unit on the input state 
S?=o ^* ® °* ls therefore 



Ki=0 / i=0 



■> r XV[ 1 

PA t P ® i— + QAQ ® o-i 



i=0 

PA P 01 + ^ QAiQ ® a., 



8=0 



By linearity, it is easy to see that the effect of two such verifier units - the ancilla 
verifier with projectors {P a , Q a } and witness verifier with projectors {P w , Q w } - is 

F w o F a ^2 A i ® a ij 

= F w (P a A P a 8) 1) + F w \ J2 QaAQa <8> cri J 

3 

= (P w P a A Q P a P w + Q w P a A P a Q w + Pu,QaA QaPw) ® 1 + Yj QwQaAiQaQw ® <Ti 

i=0 

3 

P i=l 

where the first sum is over P G {P w P a , P w Q a , QwPa, QwQa} and where Q is the single 
product Q = Q w Qa arid = Q a Qw Notice that the i = term (involving 00 = 1) 
in the second sum has been transferred to the first sum, thereby allowing the first sum 
to include all possible projection combinations. 
We can rewrite this as 

F w o F a Ai ® aA = C(A ) ®1 + Y ® °i ( 20 ) 

\i=0 / i=l 



13 



where 



C(Aq) = PA v p] = E R ™ E R * A oRa R w = (G w o G a )(A ) 

P Rw —Pw 1 Q w \P-a = Pa iQ a J 

is the composition of the pinching operators Gj(B) = PjBPj + QjBQj applied to Ao. 

Since C is the composition of pinching operators, Eqs. f)12|) and f)13[) . along with 
Eq. (HH), tell us 

Tr[C(4))] = Tr[A ] = (21) 



and 



||C(A )|| F ^Po|| F ^ 



(22) 



We are now ready to apply the final controlled expander, which by Eq. (|18p . with 
P = |1)(1| and Q = |0)(0|, has the effect 



k£{B®b) =£(B)® |1)(1|&|1)(1| +Bd 

Applying this to the state Eq. (|20() we conclude that the effect of the map in Fig. [3] on 
the initial traceless matrix Ya=o ^ ® a ' 1 ls 



$ ^E Ai0CJi J =C(^o)^|0)(0|+£:(C(^o))®|l)(l|+Q^3Q t ®|0)(0|-«S(QA3Q t )^|l)(l| 

To show that $ is a good quantum expander, we must show that it sufficiently 
decreases the Frobenius norm of its traceless input. Since £ is a /{^-contractive expander 
and C(Aq) is traceless [see Eq. (|2~Tj) ] we are guaranteed that 

\\£ (C(A ))\\ F ^Ke\\C(A )\\ F . (23) 

Applying the triangle inequality and Eqs. (|23l) . (JHJ), and (j22j) . we therefore have 



$ ^E Ai ® CTi j 



< ||C(A))|| F + ||f(C7(A)))|| F 



+ 



^ (1 + k £ )\\C(Ao)\\ f + 2 

3 



1 + K£ 



i=0 



+ 2 



(24) 



Note that we cannot make a claim similar to Eq. (|23|) for £((5^43<3^) because Q^Q^ 
need not be traceless. 

In QMA(1,0) we are guaranteed that provided the ancillae are initialized to be 
all O's, no witness can pass the verifier (for a NO instance). Mathematically, this 
guarantee is equivalent to saying that Q = 0. Consequently, the QA^Q^ vanishes and 
we are done. In QMA(a, b), however, we must upper bound ||Qj43Qt|| , which we now 
proceed to do. 
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Because x L G QMA(a, b) we are assured that for any purported witness \ip), 



\\Q w m\0)\\ ^ Vb. (25) 
Because Q a projects onto the |0)(0| ancilla subspace, we may write 

Q a A 3 Q a = c(^i,^ 2 ) |^i){^ 2 | O |0){0| 

■>f>i,i>2 

where {(V'j)} is an y orthonormal basis of the witness subspace. Note that because 
the witness register consists of n w qubits, c(fa, fa) can be regarded as a matrix with 
dimension ./V = 2 nw x 2 Uw . Thus using the triangle inequality and Eqs. (jlOp and (|25p . 



QA 3 Q* 



£ <^i^2)Q w \fa)\0)(fa\(0\Q^ 



^1,-02 



< \<fa,fa)\ Q w \fa)\0)(fa\(0\Q 



= \<^^)\ Q w \fa)\o) F Q w \fa)\o) 

< \c(fa,fa)\b. 



The matrix c has (2 n ™) elements, so its 1-norm and 2- norm are related by 



\c(fa,fa)\^2 n ™ J2 \c(4>i,fa)\ 2 = 2 nw QaA 3 Qi 



But by Eqs. {JTSJ) and JIT 
conclude, 



Q a A 3 Ql 



Ef=o Ai ® <7i 



QA 3 Q 



2 n w 
F ^ ^2 



^ A; (8) (Ti 



i=0 



6. 



; thus we 



(26) 



Although 2 Uw is exponential in n w , recall that b was chosen so that 2 Uw+1 b ^ 0.1. We 
conclude from Eqs. (|24p and (|26p that $ is a /3-contr active expander, 



* 5> 



,i=0 



</3 



i=0 



with 



/3 = 1±^±^<0.85. 
\/2 



(27) 



(28) 
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5.3 Analysis of YES case 



Now consider the case in which x £ L. Since L G QMA(a, b) there exists a valid witness 
such that 

\\Q w \ijj)\0)\\ 2 > a. (29) 

From this witness we construct the density matrix ^ = ® |0)(0| ® |0)(0| . Because 

^ passes the ancilla verifier unchanged and the witness verifier with very little change, 
^ is almost a fixed point of our expander $ (and indeed, for QMA(1,0) it is a fixed 
point); intuitively, therefore, $ is a poor expander. The matrix / = 2 „ w + na+1 1 is 
certainly a fixed point (for any unital map); therefore the traceless matrix 

A = * - J = ® |0)(0| |0)(0| - 2n J na+1 1 

is also expected to change very little under By showing this to be the case, we will 
show that $ is not an a-contractive expander for an a that is polynomially separated 
from the j3 found in the NO case. 

Using an analysis similar to the previous case, it is easy to see that the effect of our 
circuit on ^ is 



Ancilla verifier 



|V>)M®|o)(o|®|o}(o| 

^ |^)(^|®|0)(0|® |0)(0| 



Witness verifier 



-> P„(|^)(^|®|0)(0|)P u 



\0}{0\)Q W ® |0)(0| 



Controlled S 1 

> -8 

2 



P« 



\0}(0\)P W ®|1}(1| 



+ -i^(|^>(^| (8) |0>(0|)P^ (5 

+ Q»(MM®|o}(o|)Q to ®|o)(o|. 

Note that the three final terms are mutually orthogonal because |0)(0|1)(1| 
PwQw = 0. Consequently, we have 



and 



|$(*)||- 



S 



P w (\^){^\® |0)(0|)P U 



+ - A \\P w {\ip){ip\®\0){0\)P w f F 



+ ||Qw(IV'}W'l®|o>(o|)Qt 

|0«,(|^)(^|®|0)(0|)Q tt ||* 

I Q% 



i2 

If 



where we have used Eq. (|T0|) and Eq. (|29|) . 



(30) 



Now, because ^ is a pure state density matrix, ||-A||p 



1 



Tr[^ 2 



+ 



Tr 



2Tr 



, using Eq. Q, so that 



\A\\ 



1 

2n w +n a +l 



(31) 



16 



Thus, using that is linear and trace-preserving, that = I, and Eqs. (|30p and ([31 
we have 



Tr 



$(*)t$(^r) 


+ Tr 


P 


-Tr 




-Tr 


$(*)tj 



+ Tr 



2Tr 



#1 



> a 2 



1 



(1-a 2 ) 



> 



IAII 



where in the last inequality we have used from Eq. (|3ip that for n ffl ) 1 we have 
§ < < 1. Thus we conclude that <3? is not an a-contractive expander, 

\\^(A)\\ F >a\\A\\ F , (32) 



with 



a 



1 - -(1 - a 2 ) > 0.98. 
5 



(33) 



Note that a and j3 are constants, and therefore certainly polynomially separated. 

6 Conclusion 

We have presented a new computational problem, quantum non-expander, and proved 
that it is QMA-complete. This gives some insight into the computational complexity 
of estimating mixing rates of quantum channels and open quantum systems. 

In contrast to the plethora of natural NP-complete problems, very few problems 
have been shown to be QMA-complete. We hope that it may be possible to find new 
QMA-complete problems, using reductions from the quantum non-expander problem. 
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A Appendix 



A.l Master equation for a quantum system coupled to a 
bath 

In this section we derive the master equation ([5]), given the system-bath Hamiltonian 
specified in ([2]), ([3]) and (|3|). We follow the arguments of sections 3.3 and 3.4 in [8]. 
First, define new operators A aa and B aa (for a = 1, . . . , D and a = 0, 1): 

A aa = inm + (-i) CT t4), B ac = -Le(f a + (-ir/i). 

Then we can write the interaction Hamiltonian in the form 



This form is convenient because A aa and B aa are Hermitian. 

In the weak-coupling limit (e — > 0), one gets the following master equation (equation 
3.140 in [5J, simplified using the fact that H$ = 0): 

j t p s (t) = -i[H LS ,p s (t)]+V(ps(t)), (34) 
where His is the "Lamb shift" Hamiltonian and T> is the dissipator, 

H L S = Yl Sal3arAl a Ap T , V(p S ) = ^ 7o/8«rr (^rflS^L - -{A^Afr, p S }^j , 

and the coefficients S a R aT and 7 Q/ g (J r are given by 



where r Q( g CTT are the one-sided Fourier transforms (evaluated at frequency 0) of the 
bath correlation functions, 

r a/3(TT = / ds(5L(s)5^(0)), B aa (t) = e iHBt B aa e~ iHBt . 
Jo 

We can evaluate the bath correlation functions, using the fact that the bath is in a 
thermal state at temperature T. After some algebra, we get 

(BUs)B fiT (0)) = l^ T T^Y(e-^(bakb^) + e~^(-lY(b ak b\ k ,) 

' ' kk' 

+ (-i) ff ^(&Lv) + (-i) CT ^ fc (-i) r (^^)) 
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where N(ojk) = exp ^/T)-i . We take a continuum limit, replacing the sum py J2k by 
an integral j Q dk; this amounts to using a bath with infinitely many modes, and is 
necessary to obtain irreversible behavior of the system. 

We then substitute the above expression into the definition of T a p aT : 

T a p aT = \i a i T b af , ^ ds J dk((-iye is "><N(u k ) + e-^(-i) T (i + N(u> k )j) . 

We can simplify the above formula by exchanging the integrals and using the identity 
dse~ %xs = tt5(x) — i ■ PV{~), where 6(x) is the Dirac distribution and PV(^) is the 
Cauchy principal value (equation 3.202 in [8]). We then get: 

r al) „ = f ((-i)°N{u t ) [°° e<°"<d a + (-i) T (i + NM) J°° e -""<d S )dk 



Q x JO 



Vi T ^((-l) CT vriV(0) + {-Ifi ■ PV J 



+ (-1) T ^(1 + N(0)) - {-l) T i ■ PV [ 1 + N ^ k) dk) . 

Jn ) 

In particular, T a p aT can be written in the form 

r a ^ T = -rrScp^-iyQo + (-i) T Qi 

where the coefficients Q$ and Q\ are complex numbers with positive real part. 
We can now calculate the "Lamb shift" Hamiltonian His as follows: 

Safiar = \ % ' )f™<# ((-^(Qo ~ Qo) + ("1)^1 " Q*)) , 



a a r 

+ ^£(£^)(£r(-D^ 

a a t 

a a 

= Qo - Qq di , Qi - Ql DI 

2i 2i 

So His is a multiple of the identity, and it contributes nothing when we substitute it 
into the master equation ([M]) . 

Finally we can calculate the dissipator T>. First, 

laPar = ((-1)° (Qo + Q* ) + ("iRQl + Q*l)) • 

We substitute this into the definition of T>, and simplify it in the same way as we did 
for Hls- This yields 



Hps) = (Qo + Ql)J2( u -Ps u i ~ ps) + (Qi + Qt)J2( u aPsUc 



PS 



Note that Qo + Qo an ^ Qi + Q* a re positive real numbers. We substitute this into the 
master equation . This completes our proof of ([5]) . 
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A. 2 Controlled expanders 



In this appendix, we outline how we obtain the requisite controlled expander A £ needed 
for section [5j We use the results of Ben-Aroya, Schwartz, and Ta-Shma [6], whose 
Theorem 4.3 and 4.6 give the following result. 

Theorem A.l. There exists an integer Dq such that for every D > Dq and for every 
integer t > 0, there exists a explicit \ t - contractive expander of degree D 2 on a space of 
dimension D st where Xt ^ A + cA 2 with c a constant and A = 4v/ j) 1 ■ 

We will additionally use the following result, which follows directly from the defi- 
nition. Here we use the notation that T r denotes the r-fold composition of T . 

Proposition A. 2. If T is a X-contractive expander of degree D on a space of size N, 
then for any positive integer r, F r is a X T -contractive expander of degree D r on a space 
of size N. 

In section [5] we require an ft^-contractive expander £ with ^ ^ 0.1 on a space of 
size N = 2 nw+Tla . Note that N is actually allowed to exceed 2 nw+ria since we can always 
have extra input ancillae that do nothing but are acted upon by the final controlled 
expander A£ . 

Fix D to be any power of 2 larger than Dq. Then A = 4v/ ^ -1 < 1 is fixed. Let r be 
such that (A+cA 2 ) r sC 0.1. Let t = [frSgfrj = ^+^+"^- for some n extra < 81og 2 D. 

Using the above theorem we are guaranteed the existance of a A£-contractive ex- 
pander of degree D 2r on a space of size D 8t = 2 Uw+na+nextra , where D and r are 
constants and A£ ^ 0.1. 
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